Extend Claude Code to remote sessions on Amazon Bedrock AgentCore with security controls
AWS Machine Learning Blog · 人工智能
You might already run Claude Code locally on your laptop, backed by Amazon Bedrock. This post shows how to go a step further: run it as a remote agent on Amazon Bedrock AgentCore, a platform to build, connect, and optimize agents at scale, with any framework or model. The sample uses AgentCore runtime, a capability of Amazon Bedrock AgentCore, so every task runs in its own isolated session inside your AWS account. You offload a coding task, close the laptop, and come back to the result. We first discuss why teams choose Amazon Bedrock for Claude Code and highlight a few key security characteristics. Then, we discuss the remote agent architecture and walk through an accompanying sample, sample-remote-coding-agent , that implements it. The sample runs each task in its own AgentCore runtime session and returns a GitHub pull request for you to review and merge. Along the way, we show how the Amazon Bedrock data controls stay intact when a task runs remotely. Why customers run Claude Code on Amazon Bedrock Customers choose Amazon Bedrock as Claude Code’s model provider for many reasons. These include billing and credits through their existing AWS account with no per-seat licenses, audit logging in AWS CloudTrail, and geographic inference profiles for data residency. Amazon Bedrock also provides three valuable security characteristics: Data protection. Amazon Bedrock doesn’t use your content to train models or share it with model providers, and providers can’t access your prompts, completions, or the Amazon Bedrock service logs. Amazon Bedrock is in scope for SOC, ISO, and FedRAMP Moderate, is HIPAA eligible, and can be used in compliance with the GDPR. See Compliance validation for Amazon Bedrock for details. Access through controls you already govern. Claude Code calls Amazon Bedrock with temporary AWS Identity and Access Management (IAM) credentials, and you can sign in through an identity provider such as Microsoft Entra ID or Okta by following the Guidance for Claude